WhatsApp Says Spyware Company Paragon Targeted Users in Two Dozen Countries

A representative from Meta Platforms’ widely-used WhatsApp messaging service stated that Israeli spyware firm Paragon Solutions had aimed at numerous users, including journalists and civil society members.

The official announced on Friday that WhatsApp issued Paragon a cease-and-desist letter after the hack. In a statement, WhatsApp expressed that the company “will keep safeguarding individuals’ capacity to communicate privately.” Paragon chose not to comment. The WhatsApp representative informed Reuters that it had identified an attempt to breach around 90 accounts.

The official refused to specify who, in particular, was aimed at. However, he mentioned that the individuals targeted were located in over two dozen countries, featuring multiple people in Europe. He stated that WhatsApp users received harmful digital files that needed no user engagement to breach their targets, a type of zero-click hack deemed especially covert.

The official mentioned that WhatsApp had subsequently halted the hacking attempt and was directing targets to the Canadian internet monitoring organization Citizen Lab. The official refused to explain how they concluded that Paragon was accountable for the hack. He mentioned that law enforcement and industry partners had been notified, but he refrained from providing specifics.

The FBI did not promptly respond to a message requesting comment. Citizen Lab researcher John Scott-Railton mentioned that the finding of Paragon spyware aimed at WhatsApp users “serves as a reminder that mercenary spyware keeps spreading, and as it spreads, we repeatedly observe recognizable patterns of concerning use.”

Companies like Paragon that specialize in spyware offer advanced surveillance software to government customers and usually market their services as essential for combating crime and ensuring national security. However, similar surveillance tools have consistently been found on the devices of journalists, activists, opposition leaders, and at least 50 U.S. officials, sparking worries about the unregulated spread of the technology.

Paragon, which was allegedly purchased by the Florida-based investment firm AE Industrial Partners last month, has sought to establish itself in public perception as one of the more responsible entities in the industry.

The company’s website promotes “ethically grounded tools, teams, and insights to tackle persistent threats,” while media sources referencing insiders indicate that Paragon exclusively sells to governments in stable, democratic nations.

Natalia Krapiva, senior tech-legal counsel at the advocacy organization Access Now, remarked that Paragon was seen as a superior spyware firm, “but WhatsApp’s recent disclosures indicate the opposite.” “This isn’t merely an issue of a few bad actors — such abuses (are) inherent to the commercial spyware sector.” AE did not promptly respond to a request for comments.